ISG Playbook
APIs
This section provides guidance to CMS ISG team members and ISG contractors on the overall onboarding process into QualityNet IT Services. The following timeline identifies what occurs and when during the onboarding/offboarding process. The first five entries in the timeline refer to the activities involved in the onboarding process. Note that this timeline may vary based on your contract.
QualityNet | Contract Services - Onboarding/Offboarding Timeline
To learn more about the actions required and who is responsible for each action, click on the tab that corresponds to the step in the timeline.
Notify of Contract Solicitation
The CMS COR notifies the ISG Contract Onboarding Services team of a new contract solicitation and provides an estimated award date at the following email address: ISGContractorOnboardingServices@cms.hhs.gov.
Note: Only a high-level notice is needed; only provide contract specifics that are publicly available as contractors have access to the email address and only non-sensitive information should be included.
Responsible Parties:
CMS COR
Identify Contract Requirements
The CMS COR works with the ISG Contract Onboarding Services team to identify high-level service requirements for the new contract to gain a better understanding of what QualityNet IT Services will be applicable.
Responsible Parties:
CMS COR, 
ISG Contract Onboarding Services Team
The CMS ISG selects and contacts the New Contractor. Thereafter, ISG prepares the official approval of the contract to send to the New Contractor. The contract is then executed by the New Contractor. No work can start or meetings scheduled with the New Contractor until the Period of Performance (POP) begins. The New Contractor must identify a Security Point of Contact (SPOC) and Security Official (SO) within one (1) day of the contract award.
Notify of Contract Award
The CMS COR notifies the ISG Contract Onboarding Services team of a new contract award at the following email address: ISGContractorOnboardingServices@cms.hhs.gov.
Responsible Parties:
CMS COR
The Period of Performance (POP) is the time span between the effective date of a contract (when the contracted effort begins) and the last day under the contract in which deliveries of goods are made or services are performed. Once the POP begins all meetings, work, and calls can proceed.
Complete Contract Onboarding Services Intake Form
The CMS COR and New Contractor completes the ISG Contract Onboarding Services Intake Form to identify the type of work to be performed and the services required. Refer to the CMS Services tab for guidance on the Data Use Agreement (DUA) process.
- Designate initial contractor Security Official (SO) to review contractor access to approved QualityNet IT Services.
- Designate initial contractor Security Point of Contact (SPOC) who will ensure security compliance.
Upon completion, the CMS COR or New Contractor submits the form to the ISG Contract Onboarding Services team at ISGContractorOnboardingServices@cms.hhs.gov.
Responsible Parties:
CMS COR, New Contractor, ISG Contract Onboarding Services Team
Conduct Contract Onboarding Services Meeting
The ISG Contract Onboarding Services team conducts a meeting with the CMS COR and New Contractor to confirm eligibility for the services identified in the Contract Onboarding Services Intake Form and sends a request for approval of these services to the CMS Service Leads for processing.
Responsible Parties:
ISG Contract Onboarding Services Team, CMS COR, New Contractor
Complete Contract Onboarding
After the CMS Service Leads have processed the request, the ISG Contract Onboarding Services team prepares and sends a welcome package to the New Contractor’s Security Official (SO) to complete the engagement process. The welcome package includes the following information:
- List of SO Responsibilities
- List of Approved Services
- Description of Approved Services
- Instructions for Onboarding Users
Upon receipt of this welcome package and informational materials, the New Contractor SO can begin the process of onboarding new users into the QualityNet IT Services. Access is based on the list of approved services provided in the package.
Responsible Parties:
ISG Contract Onboarding Services Team, CMS Service Leads; New Contractor
Hold Contract Calls as Needed
The CMS COR and ISG Contract Onboarding Services team will conduct touch point calls with the New Contractor. During these calls, the teams will ensure that the New Contractor has all the necessary knowledge, templates, and points of contact (POCs) for any formal security deliverables or other security-related items within the dates of the engagement timeline. The teams will also ensure that the New Contractor has all necessary hardware and software ordered, delivered, and installed within the dates of the engagement timeline. The ISG Contract Onboarding Services team will be responsible for archiving documentation of the results of the meetings/calls.
Responsible Parties:
CMS COR, ISG Contract Onboarding Services Team, New Contractor
Complete Post-Onboarding Survey
The ISG Contract Onboarding Services team forwards link to Contract Onboarding Services Post-Onboarding Survey to New Contractor for response. The goal of the survey is to assist the team in creating an effective and efficient onboarding process.
Responsible Parties:
ISG Contract Onboarding Services Team, New Contractor
Refer to the Offboarding Process as the contract's Period of Performance nears its end to determine what actions are required and who is responsible.
- QualityNet IT Services: Please Contact the Service Center by phone at 1-866-288-8914 (TRS: 711); by email at ServiceCenterSOS@cms.hhs.gov; or via Slack at #help-service-center-sos
- Contract Services (Onboarding/Offboarding): Please Contact the ISG Contract Onboarding Services team by email at ISGContractorOnboardingServices@cms.hhs.gov or via Slack at #help-contract-onboarding
- Contractors: If you have other questions, please reach out to your CMS COR.